<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>伪装进程 :: 标签 :: x7peeps</title><link>https://x7peeps.com/tags/%E4%BC%AA%E8%A3%85%E8%BF%9B%E7%A8%8B/index.html</link><description/><generator>Hugo</generator><language>zh-CN</language><lastBuildDate>Tue, 16 Jun 2026 22:20:00 +0800</lastBuildDate><atom:link href="https://x7peeps.com/tags/%E4%BC%AA%E8%A3%85%E8%BF%9B%E7%A8%8B/index.xml" rel="self" type="application/rss+xml"/><item><title>系统进程检查结果与伪装及LOLBin执行链分析</title><link>https://x7peeps.com/%E5%AE%89%E5%85%A8/%E5%BA%94%E6%80%A5%E5%93%8D%E5%BA%94/0x03%E5%8F%96%E8%AF%81%E5%88%86%E6%9E%90/%E7%B3%BB%E7%BB%9F%E8%BF%9B%E7%A8%8B%E6%A3%80%E6%9F%A5%E7%BB%93%E6%9E%9C%E4%B8%8E%E4%BC%AA%E8%A3%85%E5%8F%8ALOLBin%E6%89%A7%E8%A1%8C%E9%93%BE%E5%88%86%E6%9E%90/index.html</link><pubDate>Tue, 16 Jun 2026 22:20:00 +0800</pubDate><guid>https://x7peeps.com/%E5%AE%89%E5%85%A8/%E5%BA%94%E6%80%A5%E5%93%8D%E5%BA%94/0x03%E5%8F%96%E8%AF%81%E5%88%86%E6%9E%90/%E7%B3%BB%E7%BB%9F%E8%BF%9B%E7%A8%8B%E6%A3%80%E6%9F%A5%E7%BB%93%E6%9E%9C%E4%B8%8E%E4%BC%AA%E8%A3%85%E5%8F%8ALOLBin%E6%89%A7%E8%A1%8C%E9%93%BE%E5%88%86%E6%9E%90/index.html</guid><description>围绕 ps、pstree、tasklist、/proc 等取证结果，分析如何识别伪装进程、异常父子链、LOLBin 代理执行与路径错位。</description></item></channel></rss>